Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json)
Hash identifier: 1a91JpAT4m6L2lLZNSHghnjUjB7pXyRTmM8VGaZeElQ=
Subject key identifier: 93:90:30:54:59:86:D0:12:FA:AF:55:4A:4A:B6:66:D1:5D:10:C5:4C
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 019D28F272B44CDB7E445A2B7F5B911DF2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
Manifest number: 036D
Signing time: Thu 26 Mar 2026 07:01:10 +0000
Manifest this update: Thu 26 Mar 2026 07:01:10 +0000
Manifest next update: Fri 27 Mar 2026 07:01:10 +0000
Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: mHRZqswoUiTOL5lCaDuofsUuAs/UtdPhZ2QuZq48Cxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:72:b4:4c:db:7e:44:5a:2b:7f:5b:91:1d:f2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Mar 26 07:01:10 2026 GMT
Not After : Mar 27 07:01:10 2026 GMT
Subject: CN=939030545986d012faaf554a4ab666d15d10c54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:4f:5a:86:1f:cf:81:7a:20:e5:82:b2:86:
4e:ff:33:72:e5:7a:30:44:44:af:40:f0:24:01:e3:
bf:f5:7c:4f:2e:dc:21:18:0a:8c:12:58:d2:93:f7:
96:23:5d:0e:44:ae:9f:ab:75:39:e0:7f:d3:c7:9d:
0a:b5:23:54:60:35:e2:7f:2f:53:f0:e7:92:66:fa:
04:cc:9c:95:eb:26:0b:68:be:e2:df:dd:d2:9b:61:
ca:61:43:f7:f2:ce:13:92:51:24:e7:e9:81:f2:3e:
b8:07:e9:3c:61:95:34:30:5c:a3:f8:f1:03:4e:a1:
e1:76:0f:2e:82:d9:c2:04:4b:f9:d3:69:d4:81:ea:
90:57:39:c6:9b:22:3d:29:6e:3a:ea:1e:5f:08:f3:
35:19:99:75:a0:41:20:dc:63:f5:bf:65:e2:a3:cd:
ff:b5:e1:39:29:24:9f:6e:d9:41:bd:d6:b4:b9:01:
61:90:e6:93:33:04:9b:bf:c5:29:b8:38:cf:1d:55:
ce:bf:eb:22:7d:c2:7b:fa:60:f7:a2:42:82:91:75:
a2:fa:7a:19:06:d6:dc:2e:2c:09:f8:fa:2b:e0:86:
01:35:0b:55:e0:7e:e8:45:90:d1:d5:fa:f9:85:68:
0a:5d:f8:61:fd:35:90:7f:61:9c:90:c0:d8:33:13:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:30:54:59:86:D0:12:FA:AF:55:4A:4A:B6:66:D1:5D:10:C5:4C
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:11:9c:f1:fc:81:08:0c:37:cf:d8:92:21:4e:f7:d9:63:
6c:af:6f:75:4a:17:76:16:fe:67:d1:c7:3b:45:9b:8c:b9:e9:
8a:31:a8:15:a6:ac:df:62:50:4d:f5:0e:61:66:b4:f7:a9:f9:
b4:c1:34:5d:12:05:40:03:b7:32:1e:aa:64:a8:c8:a3:db:bb:
e3:94:66:dc:95:49:a9:68:0c:f4:0a:dc:bd:5b:d5:e7:20:d1:
0c:89:7d:4a:13:a8:90:ff:c9:5c:a7:0f:c0:7d:09:12:72:a9:
c8:d2:96:25:fe:aa:fe:52:53:a4:16:3b:92:67:ab:30:70:ab:
fe:be:64:f4:cb:7b:a9:08:62:1a:73:08:60:b6:1b:21:11:b8:
5c:fb:64:01:b4:86:83:23:37:72:d8:61:2b:b9:32:e6:1c:8f:
3a:a9:28:c3:bd:35:d6:4b:0b:8d:c4:52:ff:31:38:05:8c:94:
3c:ea:86:7d:43:6f:be:67:f5:b3:4e:73:06:81:26:0e:67:df:
06:2d:02:99:6f:0d:90:75:26:7b:67:ef:41:af:f0:f6:4a:23:
29:79:6b:3e:22:d5:17:ce:c8:2d:48:c7:5a:8e:26:16:17:5e:
6f:05:8e:b3:96:d1:79:f7:1d:a9:6f:26:93:5c:2d:31:88:9a:
44:36:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:17 2026 by rpki-client